Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7ee55c-6952-4a64-b0a6-fe15c1c5aea1/1/Y2q4EOS5M-0tXyXX_ITDxeqIIJY.roa
File:                     Y2q4EOS5M-0tXyXX_ITDxeqIIJY.roa (raw, json)
Hash identifier:          PFLOh3bnv+meiUegSQj5LLH/3hodlwIy43s6W+uNj8o=
Subject key identifier:   63:6A:B8:10:E4:B9:33:ED:2D:5F:25:D7:FC:84:C3:C5:EA:88:20:96
Certificate issuer:       /CN=a97498e063cbb9a3efbfe706beec3a0c3a6f7294
Certificate serial:       01857246E0D1AC8B8EC847752BE657102EE0
Authority key identifier: A9:74:98:E0:63:CB:B9:A3:EF:BF:E7:06:BE:EC:3A:0C:3A:6F:72:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qXSY4GPLuaPvv-cGvuw6DDpvcpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/7ee55c-6952-4a64-b0a6-fe15c1c5aea1/1/Y2q4EOS5M-0tXyXX_ITDxeqIIJY.roa
Signing time:             Mon 02 Jan 2023 11:38:45 +0000
ROA not before:           Mon 02 Jan 2023 11:38:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208196
IP address blocks:        2a0f:bf00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:e0:d1:ac:8b:8e:c8:47:75:2b:e6:57:10:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97498e063cbb9a3efbfe706beec3a0c3a6f7294
        Validity
            Not Before: Jan  2 11:38:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=636ab810e4b933ed2d5f25d7fc84c3c5ea882096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f9:03:4c:e7:e0:bf:db:6e:5d:9f:2d:cc:27:
                    1c:a1:d4:9a:4b:a0:b0:55:71:a5:5e:90:4c:f9:86:
                    4f:4d:e3:5c:f7:55:ed:bb:df:3c:1b:35:8e:a6:48:
                    7d:a5:4e:36:32:72:75:26:7d:bd:00:95:1a:a1:da:
                    cd:af:52:23:cd:03:4c:db:1b:73:29:06:14:b4:68:
                    1b:5a:ac:1d:43:5a:53:89:39:9b:ad:f9:45:4b:2b:
                    59:65:f5:e6:94:c5:93:77:d4:29:6e:4f:5b:76:98:
                    80:9f:7d:32:ff:4b:10:0b:7e:ae:4c:0c:34:20:55:
                    9a:a2:b9:05:25:31:64:db:0e:1b:92:89:af:dc:69:
                    d7:8a:1d:5c:43:a4:9b:bb:24:fd:03:72:59:bc:04:
                    f8:a8:c7:93:4c:e3:3a:86:80:5b:c7:eb:eb:56:2e:
                    b0:55:cd:53:9a:6f:7e:be:65:a1:11:da:37:ad:5c:
                    29:43:4c:36:cb:35:3d:78:b1:31:26:4d:f8:03:a5:
                    3f:8c:e5:9f:1c:9e:bf:36:44:a5:bf:ac:71:a9:42:
                    3b:a8:c3:67:ee:15:1c:76:84:40:8d:58:b7:fd:f6:
                    62:41:8c:d0:d4:ae:34:84:32:dd:38:53:56:96:23:
                    7c:06:b9:51:48:48:69:44:cc:6b:e8:a7:ab:7f:24:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6A:B8:10:E4:B9:33:ED:2D:5F:25:D7:FC:84:C3:C5:EA:88:20:96
            X509v3 Authority Key Identifier:
                keyid:A9:74:98:E0:63:CB:B9:A3:EF:BF:E7:06:BE:EC:3A:0C:3A:6F:72:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXSY4GPLuaPvv-cGvuw6DDpvcpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7ee55c-6952-4a64-b0a6-fe15c1c5aea1/1/Y2q4EOS5M-0tXyXX_ITDxeqIIJY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7ee55c-6952-4a64-b0a6-fe15c1c5aea1/1/qXSY4GPLuaPvv-cGvuw6DDpvcpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:bf00::/29

    Signature Algorithm: sha256WithRSAEncryption
         92:70:30:37:32:a0:57:c5:fb:56:f8:2c:22:0b:03:70:cf:5e:
         14:e3:e2:48:fa:c1:32:79:a6:70:00:86:8d:e1:81:38:4a:20:
         ae:2d:8b:72:07:f3:01:ca:43:5d:5b:14:a4:66:b0:c1:66:b3:
         7b:13:bd:01:3f:30:bb:59:71:91:af:ec:29:2b:6e:63:f2:88:
         79:ff:bd:d8:85:4a:7b:7e:7e:6a:db:7f:09:66:bf:1d:5b:4d:
         34:b5:29:d9:d4:ec:c1:3a:14:60:63:10:0d:43:d7:b3:14:a9:
         7a:4e:38:b2:9d:72:67:b4:ca:fd:b0:32:fa:3f:bd:00:1b:38:
         f6:39:bb:31:c2:d0:39:26:32:e4:df:a3:9b:64:03:45:ea:3a:
         da:60:a8:fa:34:e1:77:76:d7:cf:60:76:61:dd:7a:b3:7d:65:
         f0:0a:20:48:b3:ad:5b:d0:4d:65:43:0d:84:11:9d:e4:3e:c9:
         94:e7:88:dd:be:b8:a2:8b:d7:04:65:f0:0b:a3:c3:7b:22:33:
         01:d7:03:4d:33:28:75:43:3d:df:e2:a3:8f:aa:4c:68:fb:9b:
         d4:67:34:5f:63:41:30:0b:a4:b8:65:38:76:e0:ce:07:1e:87:
         e1:4b:ff:93:64:b4:e4:97:2b:bc:05:b3:be:e3:24:e1:b8:bc:
         3b:2a:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----